Systems for Distributed Secure Storage of Personal Data, In Particular Biometric Impressions, and System, Local Device, and Method for Monitoring Identity

Abstract

A system for distributed secure storage of personal data, notably biometric data, a secure identity monitoring system and a local monitoring device, and a secure identity monitoring method. The personal data of persons, notably biometric impressions, are stored beforehand in a central database. The monitoring method includes: a preliminary step of constituting a database of derived data obtained from original personal data by means of a derivation function; a step of acquisition of data for the person; a step of application of the derivation function to said acquired data; a step of comparison of the result of the derivation function with all of the derived data from the database.

1 . A system for distributed storage of individual data items liable to be used for identity monitoring operations, said system comprising:
 a central database storing the original data;   a database storing derivation functions of the original data;   a management unit that effects the calculation of the derived data from the original data by means of the derivation functions and that circulates derived data and derivation functions to verification entities, each verification entity having its own derivation function; and   one or more decentralized local databases in the verification entities, said local databases storing the derived data, the stored derived data being liable to be compared with freshly acquired data in the verification entity in which it is situated to which the derivation function specific to that entity has been applied.   
     
     
         2 . The storage system as claimed in  claim 1 , wherein the management unit effects for each verification entity:
 selection of the derivation function (Fi) specific to that verification entity ( 3 ) in the database ( 12 ) of derivation functions;   calculation of the derived data from the original data using this derivation function; and   sending of the calculated derived data and the derivation function to the verification entity, the derived data being stored in the local database of the entity.   
     
     
         3 . The storage system as claimed in  claim 2 , wherein the management unit sends new derived data and a new derivation function to the verification entity at given time intervals. 
     
     
         4 . The storage system as claimed in  claim 1 , wherein the data relates to biometric impressions. 
     
     
         5 . A system for monitoring the identity of persons, said system comprising:
 a storage system as claimed in  claim 1 ; and   monitoring means assigned in each verification entity of the storage system, each monitoring means being adapted to effect:   acquisition of fresh data obtained for a person;   application of the derivation function specific to the verification entity to this fresh data; and   comparison of the result of the derivation function with all of the derived data stored in the local database of the verification entity.   
     
     
         6 . A device for local monitoring of the identity of persons, the device comprising:
 a local database of a storage system as claimed in  claim 1 , said database storing derived data obtained by the application of a derivation function to original personal data, said derivation function being specific to said device;   a memory storing said derivation function; and   monitoring means adapted to effect:
 acquisition of fresh data obtained for a person; 
 application of the derivation function to this fresh data; and 
 comparison of the result of the derivation function with all of the derived data stored in the local database. 
   
     
     
         7 . The device as claimed in  claim 6 , wherein the derived data is calculated externally of said device; the original personal data being external to said device. 
     
     
         8 . The device as claimed in  claim 6 , wherein the data relates to biometric impressions. 
     
     
         9 . A method of monitoring the identity of a person on the basis of personal data previously stored in a database, the method comprising:
 a preliminary step of constituting a database of derived data obtained from original personal data by means of a derivation function;   a step of acquisition of data for the person;   a step of application of the derivation function to said acquired data; and   a step of comparison of the result of the derivation function with all of the derived data from the database.   
     
     
         10 . The method as claimed in  claim 9 , wherein the personal data comprises biometric impressions. 
     
     
         11 . The method as claimed in  claim 10 , wherein the comparison employs a biometric test thresholding function.